Privacy Policy

Effective date: [Effective Date]. Sites: AwakenedSky.com, DivineInfiniteBeing.com, WaveFormAstrology.com and the Wave Check app.

Who we are

[Legal Entity Name], of [Postal Address], operates the sites of the School of Our Divine Infinite Being and is responsible for the personal information described here, which European law calls the controller. This policy explains what information we collect, why we collect it, who receives it, how long we keep it and the rights every person has over it. One account serves all three sites and the Wave Check app, so this one policy covers them all, with a short section at the end for what differs on each site. Questions and requests go to [support email], and our Data Requests page explains how to make them.

Our approach

We collect what the School needs to give each person what they asked for, and nothing more. We sell no personal information, we share none for advertising, we run no analytics or advertising trackers, and our sites set only the one session cookie our Cookie Notice describes. Birth data is personal, and it is used to cast charts and write readings for the person who saved it and for no other purpose. Members' charts and birth details never appear in public unless the member chooses to show them.

The information we collect

The information we hold comes from three sources: what a person gives us, what our systems record when the sites are used, and what our payment processor and the app stores report to us, and the kinds of information we hold are these:

• Account details: name, email address, the password, stored only as a protected hash that no one can read, the date of birth used to confirm age, email preferences and the record of sign-ins.
• Birth data: your own date, time and place of birth, with the time zone and coordinates worked out from them, and the same details for the people you save, with the name or nickname and relationship you give each one.
• Children's charts: the first name or nickname and birth data of a child, entered by a parent into the parent's own account, as our Children's Privacy page explains.
• Community content: the profile, its four anchor points, its links and photograph, posts, messages, group memberships, RSVPs, reports and blocks.
• School progress: for the Mystery School, the date and time a student enters for each completed step, optional tallies, planner settings, test answers and results, initiation bookings and standing, and for the Academy, enrollment, the onboarding call booking, test results and certification. The Mystery School back office keeps no journal text.
• Member tools: the AwakenedSky astrology journal, saved readings, questions put to the question engine, Wave Check settings and the reason typed into each Ask with a reason.
• Purchases: what was bought and when, the amount, the tax, subscription status, the billing country and postal code, the card brand and its last four digits as reported by Stripe, and the record of each acceptance of our terms and of each consent to a subscription, with its date, time and internet address.
• Donations: the donor's name, email, amount and date.
• Messages and email: messages sent to us, and a log of the emails we send with their delivery status.
• Technical information: internet address, browser and device type, the pages requested and the time of each request, kept in our server and security logs.
• App information: the device's notification token and settings, and the record of a store subscription reported by the app.

We never receive or store full card numbers, which Stripe holds under its own security standards, and we never ask for information that a chart or a service does not need, such as a government identity number. A person may leave any optional field empty, and a chart cast without a birth time is cast for the planets alone, with no houses or angles.

Information that the law treats as sensitive

Some of what we hold is treated as sensitive by privacy laws. The password and sign-in details of an account are sensitive under California law, and a person's place in the Mystery School, or in the School's spiritual practice, may reveal religious or philosophical beliefs, which California law and European law both protect. We use this information only to provide the services the person asked for, to keep accounts secure and to meet the law. We use no part of it to infer characteristics about anyone or to target anyone. Every student gives explicit consent to this use when enrolling in the Mystery School, the Associate path or the Academy, as the laws of Connecticut, the European Union and the United Kingdom require for information of this kind, and a student may withdraw it at any time by closing the enrollment.

How we use information

Each use of information has a purpose and, for people in Europe and the United Kingdom, a legal basis under the General Data Protection Regulation, and the purposes and their bases are these:

Readings written by computer

Many readings and answers are written by the School's astrology engine with the help of artificial intelligence language models from [AI Provider]. To write a reading, we send the provider the chart data and the reading's context, and for an Ask with a reason the reason typed by the user. We send no email address, payment details or account details, and a child's name is never sent. The provider processes this information on our behalf under a contract that [forbids it to use our data to train its models and limits how long it keeps the data: confirm with the provider], and the reading is stored in the member's account. We use no personal information to train large language models or other artificial intelligence models, our own or anyone else's.

Automated decisions

The Mystery School's open-book tests are marked automatically against the answer keys, and a wrong answer returns the student to the section to read it again, as the tests are designed. No other decision about a person is made by automated means alone, and nothing on our sites uses automated profiling to decide access to anything. A student who believes a test was marked in error may ask for a review by a person at [support email], and we answer within [10 business days].

Who receives information

We share personal information only with the people and services that need it to run the School's sites, and each service provider handles it on our behalf under a contract that limits its use, and the recipients are these:

• Service providers: Vercel for hosting, Supabase for the database and file storage, Stripe for payments and tax, Resend for email, [AI Provider] for generated readings, Zoom for talks and calls, Vimeo, Bunny and YouTube for videos, [Backup Provider] for backups, and the team that runs the Wave Check app on our behalf [name the app operator].
• Apple and Google: when someone subscribes to the standalone Wave Check app, the store handles the purchase under its own privacy policy and reports the subscription to us.
• Other members: the parts of a profile a member chooses to show, posts and messages, and the profile name of each member who RSVPs to a gathering. The holder of a Household sees the members they added.
• The Head Master, officiants and teachers: the progress, bookings and test results of the students they teach and initiate.
• Authorities and others where the law requires it: when we must answer lawful requests, protect the safety of a person, or defend our rights, and a successor organization if the School's sites are transferred, under this policy.

We sell no personal information and share none for cross-context behavioral advertising, as California law defines these terms, and we have not done so in the past 12 months. We do not share personal information with other businesses for their own marketing.

How long we keep information

Information is kept for as long as it serves its purpose and then deleted. Account information, saved charts and people, readings, journals, community content and progress are kept while the account is open and deleted when it is closed, and they leave our backups within [35 days]. Records of purchases, payments, refunds and donations are kept for [7 years] for tax and accounting. The record of each acceptance of our terms and of each consent to a subscription is kept for at least 3 years, or for 1 year after the subscription ends if that is longer. Security logs are kept for [90 days], email delivery logs for [1 year], records of privacy requests for 24 months, and recordings for the period our Recording Notice states. An account with no active subscription and no sign-in for [3 years] may be deleted after an email warning.

How we protect information

Passwords are stored as protected hashes, sessions use random codes whose hashes alone are stored, and every connection to our sites is encrypted. Access to members' information is limited to the people who need it for their role, administrative actions are recorded in an audit log, and the Head Master's recordings and our database are backed up. No system is perfectly secure, and if a breach affects personal information, we notify the people affected and the authorities as the law requires.

Information from Europe and the United Kingdom

Our sites are run from the United States, and our service providers store information in the United States [confirm the regions of Vercel and Supabase]. When a person in Europe or the United Kingdom gives us information, they send it directly to us in the United States, and we keep our service providers in United States regions so that the information stays there. When our service providers receive personal information from Europe or the United Kingdom, they rely on the EU-U.S. Data Privacy Framework and its UK extension where they are certified, or on the standard contractual clauses approved by the European Commission and the United Kingdom addendum. [Counsel confirms whether an EU or UK representative under Article 27 is required, and names it here: EU Representative, UK Representative.]

Your rights

Every person may see, copy, correct and delete the personal information we hold about them, withdraw a consent, object to a use based on our legitimate interests, ask us to restrict a use, and receive their information in a portable format. California residents also have the right to know what we collect and disclose, to delete, to correct, to opt out of sale or sharing, to limit the use of sensitive information and to be free of discrimination for using these rights. Residents of the other states with privacy laws have similar rights and may appeal our decisions. People in Europe and the United Kingdom may also complain to their data protection authority. Our Data Requests page explains how to use each right, and an authorized agent may act for a person as that page describes.

California categories

This list sets out, in the categories of the California Consumer Privacy Act, what we collected in the past 12 months, where it came from and to whom we disclosed it for a business purpose, and we sold and shared none of it.

We collect birth date, time and place for each chart, and this information is used only as the purposes above describe, and we collect no precise geolocation from any device. A birthplace is recorded as a town or city with its coordinates, so that the chart can be cast for it, and it is never used to locate a person.

Email

We send two kinds of email, and each follows its own rules under the federal CAN-SPAM Act and the laws of other countries. Transactional email, such as receipts, trial confirmations and reminders, renewal notices, password resets and security messages, comes with the account and the purchases and is sent whatever a person's preferences. Optional email, such as transit updates, plan reminders and School news, is sent only to people who chose it, and every optional email has an unsubscribe link that works at once and our postal address. A person may change these choices in the account at any time.

Children

Our sites are for adults, and no person under 13 may have an account. Children's charts are kept only inside a parent's account and used only for the parent, as our Children's Privacy page explains. A parent may see, correct or delete a child's chart at any time, and a child's name is never sent to any artificial intelligence service.

Browser signals

Our sites honor the Global Privacy Control signal as a request to opt out of sale and sharing, although we neither sell nor share personal information. Because we use no tracking, a Do Not Track signal changes nothing on our sites. These signals are read by our servers with each request, and no setting in the account is needed for them to work.

What differs on each site

The account, the payment records and the rights above are the same on every site, and each site also collects its own kinds of information, set out here:

• AwakenedSky.com: birth data for quick charting is used to draw the chart and is discarded when the visitor leaves, unless a member saves it. Members' saved charts and people, children's charts, Households, the community, events, the astrology journal, Wave Check and donations are all held here.
• DivineInfiniteBeing.com: applications, Mystery School progress, planner settings, test answers and results, initiation bookings and the record of initiations, the Associate path and the Academy are held here. The Head Master's audio journals and videos are stored for students to play, and the site shows no date of any recording.
• WaveFormAstrology.com: the site casts no charts, and it holds only the purchase and the download record of the manual, with the account details of the buyer.

Changes to this policy

When we change this policy, we post the new version with a new effective date, and when a change is material we email account holders before it takes effect. We review this policy at least once every 12 months, and earlier versions are available on request. Questions about this policy go to [Legal Entity Name] at [Postal Address] or [support email].

All policies